Lucene search
Ubuntu.comUB:CVE-2013-4351HistorySep 13, 2013 - 12:00 a.m.
CVE-2013-4351
2013-09-1300:00:00
ubuntu.com
ubuntu.com
10
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
EPSS
0.004
Percentile
74.4%
GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits
cleared (no usage permitted) as if it has all bits set (all usage
permitted), which might allow remote attackers to bypass intended
cryptographic protection mechanisms by leveraging the subkey.
Bugs
- <https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4351>
- <https://bugs.gentoo.org/show_bug.cgi?id=484836>
- <https://bugzilla.novell.com/show_bug.cgi?id=840510>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=722722 (gnupg)>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=722724 (gnupg2)>
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 10.04 | noarch | gnupg | < 1.4.10-2ubuntu1.4 | UNKNOWN |
| ubuntu | 12.04 | noarch | gnupg | < 1.4.11-3ubuntu2.4 | UNKNOWN |
| ubuntu | 12.10 | noarch | gnupg | < 1.4.11-3ubuntu4.3 | UNKNOWN |
| ubuntu | 13.04 | noarch | gnupg | < 1.4.12-7ubuntu1.2 | UNKNOWN |
| ubuntu | 12.04 | noarch | gnupg2 | < 2.0.17-2ubuntu2.12.04.3 | UNKNOWN |
| ubuntu | 12.10 | noarch | gnupg2 | < 2.0.17-2ubuntu3.2 | UNKNOWN |
| ubuntu | 13.04 | noarch | gnupg2 | < 2.0.19-2ubuntu1.1 | UNKNOWN |
Related
f5
f5
K50413110 : GnuPG vulnerability CVE-2013-4351
2016-02-19 00:00:00
SOL50413110 - GnuPG vulnerability CVE-2013-4351
2016-02-18 00:00:00
nessus
nessus
openSUSE Security Update : gpg2 (openSUSE-SU-2013:1526-1)
2014-06-13 00:00:00
openSUSE Security Update : gpg2 (openSUSE-SU-2013:1494-1)
2014-06-13 00:00:00
F5 Networks BIG-IP : GnuPG vulnerability (K50413110)
2016-02-22 00:00:00
cvelist
cvelist
CVE-2013-4351
2013-10-10 00:00:00
openvas
openvas
F5 BIG-IP - GnuPG vulnerability CVE-2013-4351
2016-02-23 00:00:00
Ubuntu: Security Advisory (USN-1987-1)
2022-08-26 00:00:00
Mageia: Security Advisory (MGASA-2013-0299)
2022-01-28 00:00:00
nvd
nvd
CVE-2013-4351
2013-10-10 00:55:15
prion
prion
Design/Logic Flaw
2013-10-10 00:55:00
cve
cve
CVE-2013-4351
2013-10-10 00:55:15
kaspersky
kaspersky
KLA10174 SB vulnerability in GnuPG
2013-10-09 00:00:00
debiancve
debiancve
CVE-2013-4351
2013-10-10 00:55:15
securityvulns
securityvulns
GnuPG security vulnerabilities
2013-10-12 00:00:00
[ MDVSA-2013:247 ] gnupg
2013-10-12 00:00:00
debian
debian
[SECURITY] [DSA 2773-1] gnupg security update
2013-10-10 17:23:37
[SECURITY] [DSA 2774-1] gnupg security update
2013-10-10 17:23:40
mageia
mageia
Updated gnupg2 packages fix multiple vulnerabilities
2013-10-10 02:34:30
fedora
fedora
[SECURITY] Fedora 20 Update: gnupg-1.4.15-1.fc20
2013-10-10 14:48:23
[SECURITY] Fedora 19 Update: gnupg-1.4.15-1.fc19
2013-10-12 00:03:06
[SECURITY] Fedora 18 Update: gnupg-1.4.15-1.fc18
2013-11-13 02:26:42
amazon
amazon
Medium: gnupg2
2013-10-23 15:24:00
Medium: gnupg
2013-10-23 15:23:00
osv
osv
gnupg - several
2013-10-10 00:00:00
gnupg2 - several
2013-10-10 00:00:00
gpg2-2.1.16-1.1 on GA media
2024-06-15 00:00:00
ubuntu
ubuntu
GnuPG vulnerabilities
2013-10-09 00:00:00
oraclelinux
oraclelinux
gnupg2 security update
2013-10-24 00:00:00
gnupg security update
2013-10-24 00:00:00
redhat
redhat
(RHSA-2013:1459) Moderate: gnupg2 security update
2013-10-24 00:00:00
(RHSA-2013:1458) Moderate: gnupg security update
2013-10-24 00:00:00
centos
centos
gnupg2 security update
2013-10-24 16:06:44
gnupg security update
2013-10-25 14:00:34
gentoo
gentoo
GnuPG, Libgcrypt: Multiple vulnerabilities
2014-02-21 00:00:00
veracode
veracode
Information Disclosure
2019-05-02 04:56:46
Denial Of Service (DOS)
2019-05-02 04:56:46
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
EPSS
0.004
Percentile
74.4%
Related for UB:CVE-2013-4351